Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
File:                     nVE44frPe2XbtXX6fUckDCeLNN8.cer (raw, json)
Hash identifier:          G+wTvfGmpOLXzVmdWpPIFpO28JgarpdY6opUa3zcJHU=
Subject key identifier:   9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       018CC4937124BEA5113F922FB7B2787AE755
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Mon 01 Jan 2024 10:30:46 +0000
Certificate not after:    Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources:    AS: 206259
                          IP: 185.83.144.0/22
                          IP: 185.174.28.0/22
                          IP: 2a05:9bc0::/29
                          IP: 2a0b:8100::/29

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 May 2024 14:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:71:24:be:a5:11:3f:92:2f:b7:b2:78:7a:e7:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 10:30:46 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:aa:70:89:c1:ef:50:1b:34:6c:38:56:ac:a5:
                    6d:0c:67:62:6f:7d:bb:f2:88:aa:7e:cb:35:12:39:
                    b5:75:c7:ed:3b:3e:0f:f6:fc:4b:5e:97:05:51:1b:
                    b9:15:50:d4:b9:ac:32:48:bb:2b:26:35:12:d9:fe:
                    4c:aa:d8:af:e1:6f:6b:8c:7e:41:c3:67:d8:1f:ef:
                    2d:bd:69:eb:a9:9f:87:fe:8a:1f:d5:56:cd:6f:21:
                    ac:4f:6c:81:7d:6a:30:0d:7b:05:cc:22:fe:13:e6:
                    d0:ed:ba:ba:75:8a:bf:79:71:06:c6:13:ff:47:be:
                    13:ce:93:d5:b6:fa:93:0a:01:60:46:50:58:5f:f5:
                    ee:3d:fd:39:b9:df:51:b2:0f:57:ef:3b:84:ed:70:
                    a5:58:17:cf:f4:db:71:d5:64:78:49:a3:f5:ce:54:
                    77:cd:b8:28:a0:cc:da:15:b3:a0:54:f6:f1:d4:cc:
                    ff:a7:b1:9b:1f:14:9f:db:dd:62:5c:2e:33:e1:64:
                    f4:12:f9:05:e6:6d:cf:db:f1:c1:1a:63:7c:64:7c:
                    f9:ba:ad:0d:30:b8:76:42:b9:fc:4d:8f:c0:93:04:
                    56:17:02:9e:a4:f4:7e:ef:a7:98:c6:e4:df:00:07:
                    75:b8:60:20:6f:ec:6e:5a:86:ce:62:f5:6d:3c:1f:
                    e8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.83.144.0/22
                  185.174.28.0/22
                IPv6:
                  2a05:9bc0::/29
                  2a0b:8100::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  206259

    Signature Algorithm: sha256WithRSAEncryption
         3c:0b:79:cd:7c:dd:3a:4d:17:82:19:66:ce:8f:1b:6e:7f:8c:
         d7:4e:08:4b:b8:4c:04:bb:0a:74:b8:44:8c:6c:da:25:93:ee:
         a7:e4:ba:ed:9e:5e:6a:a3:67:02:6f:11:7a:b0:7d:27:f5:70:
         2f:44:8e:f6:9f:b6:a2:73:9a:fd:20:ad:b0:42:44:03:d6:32:
         58:41:17:54:60:ec:38:b8:c2:6b:78:22:cd:2c:09:5d:51:cf:
         86:22:a6:a6:86:dd:57:a3:12:de:e7:86:08:5a:e2:25:43:e5:
         91:a1:b6:8b:03:e5:fa:b1:0d:4e:75:3c:49:0a:9e:6c:18:59:
         f7:cd:80:94:a6:04:72:d2:31:de:b2:cf:3a:04:d7:0e:f2:e3:
         97:03:d1:f6:88:25:c2:4d:99:64:4a:14:66:5c:72:1e:d7:46:
         ef:c3:8a:3d:e1:35:d2:ba:af:70:93:1c:65:fc:19:0f:ab:97:
         cd:26:ac:65:be:89:70:c9:e2:a4:0a:43:46:12:88:69:c2:76:
         e4:14:c5:6e:30:9a:84:a4:7d:75:19:d0:de:7e:9c:3c:1f:3e:
         c9:d4:9c:70:f7:51:7f:47:3f:f5:51:d0:6c:f9:1a:5a:1b:b5:
         7b:f6:42:27:73:21:6a:1f:64:b0:a4:b8:8d:b8:c6:ef:c9:bc:
         48:de:d9:33
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgISAYzEk3EkvqURP5Ivt7J4eudVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAxMTAzMDQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDUxMzhlMWZhY2Y3YjY1ZGJiNTc1ZmE3ZDQ3MjQwYzI3OGIzNGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6pwicHvUBs0bDhWrKVtDGdib327
8oiqfss1Ejm1dcftOz4P9vxLXpcFURu5FVDUuawySLsrJjUS2f5Mqtiv4W9rjH5B
w2fYH+8tvWnrqZ+H/oof1VbNbyGsT2yBfWowDXsFzCL+E+bQ7bq6dYq/eXEGxhP/
R74TzpPVtvqTCgFgRlBYX/XuPf05ud9Rsg9X7zuE7XClWBfP9Ntx1WR4SaP1zlR3
zbgooMzaFbOgVPbx1Mz/p7GbHxSf291iXC4z4WT0EvkF5m3P2/HBGmN8ZHz5uq0N
MLh2Qrn8TY/AkwRWFwKepPR+76eYxuTfAAd1uGAgb+xuWobOYvVtPB/oBwIDAQAB
o4ICvDCCArgwHQYDVR0OBBYEFJ1ROOH6z3tl27V1+n1HJAwnizTfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzL2QwMDFm
Zi04MzIzLTRiODktYmUzZC1jMmVmZWIzYjMyYTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvZDAwMWZm
LTgzMjMtNGI4OS1iZTNkLWMyZWZlYjNiMzJhNS8xL25WRTQ0ZnJQZTJYYnRYWDZm
VWNrRENlTE5OOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF
BwEHAQH/BCwwKjASBAIAATAMAwQCuVOQAwQCua4cMBQEAgACMA4DBQMqBZvAAwUD
KguBADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDJbMwDQYJKoZIhvcNAQELBQAD
ggEBADwLec183TpNF4IZZs6PG25/jNdOCEu4TAS7CnS4RIxs2iWT7qfkuu2eXmqj
ZwJvEXqwfSf1cC9EjvaftqJzmv0grbBCRAPWMlhBF1Rg7Di4wmt4Is0sCV1Rz4Yi
pqaG3VejEt7nhgha4iVD5ZGhtosD5fqxDU51PEkKnmwYWffNgJSmBHLSMd6yzzoE
1w7y45cD0faIJcJNmWRKFGZcch7XRu/Dij3hNdK6r3CTHGX8GQ+rl80mrGW+iXDJ
4qQKQ0YSiGnCduQUxW4wmoSkfXUZ0N5+nDwfPsnUnHD3UX9HP/VR0Gz5GlobtXv2
QidzIWofZLCkuI24xu/JvEje2TM=
-----END CERTIFICATE-----
Generated at Thu May 23 01:16:15 2024 by rpki-client on console-ams.rpki-client.org